webinoly/templates/nginx/common/headers-html.conf

add_header Cache-Control "public, no-cache";
add_header Referrer-Policy "unsafe-url";
#add_header Content-Security-Policy " ";